Vulnerability Details : CVE-2020-5359
Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data.
Products affected by CVE-2020-5359
- cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:11.1.1.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:12.2.1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-5359
0.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 51 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-5359
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST | |
5.8
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
3.9
|
1.4
|
NIST | |
5.8
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
3.9
|
1.4
|
Dell |
CWE ids for CVE-2020-5359
-
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.Assigned by: nvd@nist.gov (Primary)
-
The product does not use a standardized method for handling errors throughout the code, which might introduce inconsistent error handling and resultant weaknesses.Assigned by: security_alert@emc.com (Secondary)
References for CVE-2020-5359
-
https://www.oracle.com/security-alerts/cpuApr2021.html
Oracle Critical Patch Update Advisory - April 2021Patch;Third Party Advisory
-
https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-multiple-security-vulnerabilities
DSA-2020-114: Dell BSAFEā¢ Micro Edition Suite Multiple Security Vulnerabilities | Dell NederlandVendor Advisory
Jump to